This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/mHSXqHaswANkLe-lLH1pLGWb5cg.roa File: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (raw, json) Hash identifier: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k= Subject key identifier: 98:74:97:A8:76:AC:C0:03:64:2D:EF:A5:2C:7D:69:2C:65:9B:E5:C8 Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 019B7758E8CC0E4F26216A67345C15BB6483 Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/mHSXqHaswANkLe-lLH1pLGWb5cg.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197033 IP address blocks: 46.18.224.0/21 maxlen: 21 91.216.43.0/24 maxlen: 24 93.177.81.0/24 maxlen: 24 185.24.152.0/22 maxlen: 22 185.33.88.0/22 maxlen: 22 185.147.65.0/24 maxlen: 24 185.147.67.0/24 maxlen: 24 185.155.173.0/24 maxlen: 24 185.195.248.0/24 maxlen: 24 185.195.249.0/24 maxlen: 24 185.195.250.0/24 maxlen: 24 185.195.251.0/24 maxlen: 24 194.147.172.0/24 maxlen: 24 194.147.227.0/24 maxlen: 24 194.147.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 20:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e8:cc:0e:4f:26:21:6a:67:34:5c:15:bb:64:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=987497a876acc003642defa52c7d692c659be5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:3e:69:82:05:80:94:dd:87:97:33:89:7f: 53:f1:95:67:d9:26:be:4e:5f:3e:57:57:01:e0:da: 57:ab:9b:ca:a8:b1:c0:57:d1:63:3c:2d:f7:96:97: f3:93:14:38:04:b6:53:54:49:cd:67:0f:06:50:ee: 72:01:52:9d:a0:30:23:f3:ac:91:91:56:75:36:ba: 33:9e:72:f0:47:f4:3b:7d:3b:ea:d3:ca:59:6c:5f: 4a:85:15:f2:3d:76:ce:f5:52:ca:58:88:1f:d3:d0: 26:94:50:d4:ff:04:c0:ca:48:e2:6b:3a:5c:ef:92: d7:e0:ae:0e:8b:ff:1c:10:0c:39:10:5e:e3:11:df: d8:06:95:e9:0f:5e:2d:c4:ba:b7:0e:c0:a5:94:fd: 74:fa:db:c9:ee:cf:b3:26:56:ea:b6:fc:28:9c:e1: 07:39:ad:72:98:e8:f3:71:88:e9:36:0b:3d:dc:9c: ab:3f:d5:2e:79:3a:60:d5:32:74:ca:02:95:dc:7b: d7:82:e0:37:ce:76:cc:6f:0b:da:b1:94:e1:d1:46: bc:01:d7:0b:93:b7:10:55:c6:2b:5f:28:b4:f5:89: 56:7c:6c:5e:2c:07:71:b0:c9:f2:84:a9:8d:c7:06: e3:6d:6b:a6:dc:5c:80:51:08:e9:83:7e:2b:23:6e: 70:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:74:97:A8:76:AC:C0:03:64:2D:EF:A5:2C:7D:69:2C:65:9B:E5:C8 X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/mHSXqHaswANkLe-lLH1pLGWb5cg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.224.0/21 91.216.43.0/24 93.177.81.0/24 185.24.152.0/22 185.33.88.0/22 185.147.65.0/24 185.147.67.0/24 185.155.173.0/24 185.195.248.0/22 194.147.172.0/24 194.147.227.0-194.147.228.255 Signature Algorithm: sha256WithRSAEncryption 8c:d2:37:19:b5:47:ac:54:fa:bf:56:24:3f:9a:fb:1d:2d:0f: 1c:e7:20:5e:42:2d:2f:d6:b7:7d:3e:a1:37:b3:ea:60:1f:68: 15:a0:6b:0e:f8:49:80:1f:c0:9a:93:2f:75:64:2e:b6:73:30: 90:0c:5d:31:3f:ab:f5:96:ac:03:b5:07:f7:9f:a5:f3:13:ad: 88:49:12:d0:79:f7:c8:c5:46:02:9a:62:57:9e:0b:d5:5f:7b: 22:08:a8:47:b0:0c:9b:e6:24:ce:56:34:f9:ea:d8:d6:d6:aa: 9f:df:1a:14:74:43:fe:a2:ac:b5:da:22:1a:82:aa:eb:8d:b0: f1:ab:48:01:b2:83:f4:78:17:7a:a6:b4:76:00:ce:6e:0b:53: cc:df:b5:64:21:52:16:ef:14:bb:2f:84:6b:f1:fd:27:9d:c6: dc:b0:6f:12:4e:6f:84:16:18:39:1f:f6:af:79:04:71:d4:5a: ed:f2:68:03:f6:08:8a:b7:75:84:ab:7b:91:aa:5b:3e:59:f9: ec:98:95:1c:bf:b3:fe:96:02:08:af:76:44:66:dc:57:16:8c: 24:57:a0:e5:8e:bf:e3:ff:3d:1d:c5:0c:ce:13:21:09:de:fb: d7:11:e7:0e:79:2a:9a:11:55:4d:c7:52:79:6a:10:26:c8:1c: cd:b7:6b:0e -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt3WOjMDk8mIWpnNFwVu2SDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODc0OTdhODc2YWNjMDAzNjQyZGVmYTUyYzdkNjkyYzY1OWJlNWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPo+aYIFgJTdh5cziX9T8ZVn2Sa+ Tl8+V1cB4NpXq5vKqLHAV9FjPC33lpfzkxQ4BLZTVEnNZw8GUO5yAVKdoDAj86yR kVZ1NroznnLwR/Q7fTvq08pZbF9KhRXyPXbO9VLKWIgf09AmlFDU/wTAykjiazpc 75LX4K4Oi/8cEAw5EF7jEd/YBpXpD14txLq3DsCllP10+tvJ7s+zJlbqtvwonOEH Oa1ymOjzcYjpNgs93JyrP9UueTpg1TJ0ygKV3HvXguA3znbMbwvasZTh0Ua8AdcL k7cQVcYrXyi09YlWfGxeLAdxsMnyhKmNxwbjbWum3FyAUQjpg34rI25wkwIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFJh0l6h2rMADZC3vpSx9aSxlm+XIMB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvbUhTWHFIYXN3QU5rTGUtbExIMXBMR1diNWNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQDLhLgAwQA W9grAwQAXbFRAwQCuRiYAwQCuSFYAwQAuZNBAwQAuZNDAwQAuZutAwQCucP4AwQA wpOsMAwDBADCk+MDBADCk+QwDQYJKoZIhvcNAQELBQADggEBAIzSNxm1R6xU+r9W JD+a+x0tDxznIF5CLS/Wt30+oTez6mAfaBWgaw74SYAfwJqTL3VkLrZzMJAMXTE/ q/WWrAO1B/efpfMTrYhJEtB598jFRgKaYleeC9VfeyIIqEewDJvmJM5WNPnq2NbW qp/fGhR0Q/6irLXaIhqCquuNsPGrSAGyg/R4F3qmtHYAzm4LU8zftWQhUhbvFLsv hGvx/SedxtywbxJOb4QWGDkf9q95BHHUWu3yaAP2CIq3dYSre5GqWz5Z+eyYlRy/ s/6WAgivdkRm3FcWjCRXoOWOv+P/PR3FDM4TIQne+9cR5w55KpoRVU3HUnlqECbI HM23aw4= -----END CERTIFICATE-----Generated at Sun Jan 11 06:37:18 2026 by rpki-client